Autoplay Next video from Max length

How We Survived Our First PCI/HIPAA Compliant Check with Kubernetes - Travis Jeppson, Nav

1,316 views · Published 16 December 2018 · 34:44 · Indexed 6 November 2026

Channel: CNCF [Cloud Native Computing Foundation] · 2018 · Film & Animation

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

At a high level, Travis will go over what it took for Nav to pass their first compliance check with their application in Kubernetes. At a lower level, he'll discuss what PCI/HIPAA compliance is like in a world of containers. How to translate, and prioritize, the requirements from a traditional model, using virtual machines, to using a containerized model. What tools are already provided with Kubernetes, such as taints and tolerances, which tools are plug-ins, such as network policies; and what is missing and requires an external service. D70He'll briefly cover Nav's build pipelines and why adding in security checks into the docker builds is important to maintaining a compliant environment. Finally, he'll discuss how moving forward you can reach a point of attaining a state of constant compliance; there is no reason to struggle to "become" compliant on a quarterly, or yearly, cadence.

To learn more: https://sched.co/Gra0

How We Survived Our First PCI/HIPAA Compliant Check with Kubernetes - Travis Jeppson, Nav

More from this channel